CVE-2020-13225: XSS
Published May 20, 2020
·Updated
phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget.
Affected Software
1 affected component
Phpipam Phpipam=1.4
Event History
May 20, 2020
CVE Published
via MITRE·03:05 AM
Data Sourced
via MITRE·03:05 AM
Description
Frequently Asked Questions
1
What is the vulnerability?
phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget.
2
What is the severity of CVE-2020-13225?
The severity of CVE-2020-13225 is medium with a severity value of 4.8.
3
How does the vulnerability affect phpIPAM?
The vulnerability affects phpIPAM version 1.4.
4
How can I fix CVE-2020-13225?
A fix for CVE-2020-13225 has not been provided at the moment. Please refer to the vendor's website or official sources for updates.
5
Is there any additional information about this vulnerability?
For additional information about CVE-2020-13225, you can visit the provided references: [GitHub](https://github.com/phpipam/phpipam/issues/3025) and [YouTube](https://www.youtube.com/watch?v=SpFmM03Jl40).